This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/b7e4ac-8508-4d6b-a2bc-274cd6caa3f3/1/cMuWVD9-GVcj5tEiwpR4v92gPsw.mft File: cMuWVD9-GVcj5tEiwpR4v92gPsw.mft (raw, json) Hash identifier: 4VznUOnGE2+XAMijBrqE4cr6vXan8UZuX4EJd5qwX/I= Subject key identifier: 0C:F8:52:47:5D:3D:F6:8D:16:5C:B6:CC:D0:41:46:A8:49:0A:26:A2 Authority key identifier: 70:CB:96:54:3F:7E:19:57:23:E6:D1:22:C2:94:78:BF:DD:A0:3E:CC Certificate issuer: /CN=70cb96543f7e195723e6d122c29478bfdda03ecc Certificate serial: 019B35A0854ADD1618F62AD5D80A17C5A6ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMuWVD9-GVcj5tEiwpR4v92gPsw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/b7e4ac-8508-4d6b-a2bc-274cd6caa3f3/1/cMuWVD9-GVcj5tEiwpR4v92gPsw.mft Manifest number: 0C19 Signing time: Fri 19 Dec 2025 08:01:10 +0000 Manifest this update: Fri 19 Dec 2025 08:01:10 +0000 Manifest next update: Sat 20 Dec 2025 08:01:10 +0000 Files and hashes: 1: 8anvDKitwmoS5b1R9CoiYAIvV4s.roa (hash: sK8EhnVxeI2sQ1OgOLzF1LkVF8lOtqG5DcBtonQ6uEM=) 2: cMuWVD9-GVcj5tEiwpR4v92gPsw.crl (hash: HRPg9W4phS4PCBNPKZ8X3Ee+vMZo3aUvzWFe/4WoHbE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/b7e4ac-8508-4d6b-a2bc-274cd6caa3f3/1/cMuWVD9-GVcj5tEiwpR4v92gPsw.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/b7e4ac-8508-4d6b-a2bc-274cd6caa3f3/1/cMuWVD9-GVcj5tEiwpR4v92gPsw.mft rsync://rpki.ripe.net/repository/DEFAULT/cMuWVD9-GVcj5tEiwpR4v92gPsw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:a0:85:4a:dd:16:18:f6:2a:d5:d8:0a:17:c5:a6:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70cb96543f7e195723e6d122c29478bfdda03ecc Validity Not Before: Dec 19 08:01:10 2025 GMT Not After : Dec 20 08:01:10 2025 GMT Subject: CN=0cf852475d3df68d165cb6ccd04146a8490a26a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:ce:f4:0b:cb:9f:a9:c3:c8:14:c9:b7:d1:1d: 5b:3b:cd:09:9b:f8:90:e8:d5:17:b0:d4:ca:15:3e: 78:a1:c8:18:17:3b:88:1b:e1:42:af:8a:37:f5:d2: 2b:c4:df:f3:2b:8b:60:1b:73:b8:35:2d:f0:b2:d0: fe:37:74:72:0f:d2:80:fa:ca:34:20:b6:00:25:0e: fb:a5:d6:c6:56:cd:dd:ec:f2:b8:f3:71:b3:7f:1f: 37:01:18:81:fd:dc:7d:c2:1e:7a:0f:28:7d:91:ff: 8e:f0:a6:e0:a0:82:bb:08:b0:dc:d0:e4:2d:99:8c: 97:ce:59:94:4f:56:96:9a:60:99:a7:9d:6e:0d:ee: d0:fe:0c:b3:a4:d8:a4:f5:8f:6b:74:62:68:e6:6b: 75:d9:c8:05:fd:61:68:8e:8c:46:84:d3:38:c5:58: 79:54:ae:3f:0a:22:be:d7:5b:a6:7d:0d:01:ca:2a: 1c:ec:43:89:c7:67:07:b8:f1:af:12:21:ca:1e:44: c7:11:ff:e6:2d:60:a1:de:db:72:4e:85:56:0b:65: 77:32:bd:50:69:c5:f5:81:67:0d:34:2c:7b:6f:f5: 84:f3:83:76:ee:a2:8c:e0:ce:f4:f1:40:ab:a6:f4: 34:1f:22:26:5c:19:7d:ce:0f:c9:e8:07:70:e6:c6: c8:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:F8:52:47:5D:3D:F6:8D:16:5C:B6:CC:D0:41:46:A8:49:0A:26:A2 X509v3 Authority Key Identifier: keyid:70:CB:96:54:3F:7E:19:57:23:E6:D1:22:C2:94:78:BF:DD:A0:3E:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMuWVD9-GVcj5tEiwpR4v92gPsw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/b7e4ac-8508-4d6b-a2bc-274cd6caa3f3/1/cMuWVD9-GVcj5tEiwpR4v92gPsw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/b7e4ac-8508-4d6b-a2bc-274cd6caa3f3/1/cMuWVD9-GVcj5tEiwpR4v92gPsw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:e7:26:25:5c:e3:38:bd:27:82:e2:16:c9:66:d5:94:70:83: 0b:c2:ff:6a:93:4c:e5:1a:d7:e8:db:78:14:19:bb:7f:a0:a3: c0:2f:c9:e9:cd:94:c5:00:31:e5:9b:54:87:92:cb:fb:96:6a: 69:db:3b:ca:1d:da:e4:6e:ce:85:08:31:38:79:67:e7:a0:d2: b0:cb:7b:41:a5:1c:75:2d:43:9d:d5:2e:ee:73:a3:56:12:19: 90:74:4d:28:4a:8a:7b:ee:f9:77:10:d4:77:5a:36:36:26:a5: 4d:25:c3:3e:d5:5b:3b:23:1e:5a:7a:76:ee:58:e0:01:d9:df: 57:29:e3:e6:64:9e:39:31:d0:ee:b7:c4:10:39:a3:31:d0:8a: 76:49:26:03:02:66:48:a9:64:c6:12:6b:4f:95:6c:0b:12:0a: f5:c7:0b:16:ff:cb:dc:58:38:04:52:b1:73:d6:3b:28:7f:24: 6f:a6:28:86:85:2d:89:be:ad:c6:a7:f8:34:48:27:ce:b1:23: 8f:0c:ce:83:de:93:3d:d8:01:29:a7:e3:2d:66:e2:02:7a:97: df:2a:64:64:ed:0e:76:31:6b:00:92:ad:80:a7:5a:e8:e5:94: f4:81:09:6b:76:9e:b7:f5:85:57:12:3b:95:ea:18:ed:ba:22: ec:49:86:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1oIVK3RYY9irV2AoXxabtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwY2I5NjU0M2Y3ZTE5NTcyM2U2ZDEyMmMyOTQ3OGJmZGRh MDNlY2MwHhcNMjUxMjE5MDgwMTEwWhcNMjUxMjIwMDgwMTEwWjAzMTEwLwYDVQQD EygwY2Y4NTI0NzVkM2RmNjhkMTY1Y2I2Y2NkMDQxNDZhODQ5MGEyNmEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7870C8ufqcPIFMm30R1bO80Jm/iQ 6NUXsNTKFT54ocgYFzuIG+FCr4o39dIrxN/zK4tgG3O4NS3wstD+N3RyD9KA+so0 ILYAJQ77pdbGVs3d7PK483Gzfx83ARiB/dx9wh56Dyh9kf+O8KbgoIK7CLDc0OQt mYyXzlmUT1aWmmCZp51uDe7Q/gyzpNik9Y9rdGJo5mt12cgF/WFojoxGhNM4xVh5 VK4/CiK+11umfQ0Byioc7EOJx2cHuPGvEiHKHkTHEf/mLWCh3ttyToVWC2V3Mr1Q acX1gWcNNCx7b/WE84N27qKM4M708UCrpvQ0HyImXBl9zg/J6Adw5sbI4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAz4UkddPfaNFly2zNBBRqhJCiaiMB8GA1UdIwQY MBaAFHDLllQ/fhlXI+bRIsKUeL/doD7MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY011V1ZEOS1HVmNqNXRFaXdwUjR2OTJnUHN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9iN2U0YWMtODUwOC00ZDZiLWEyYmMt Mjc0Y2Q2Y2FhM2YzLzEvY011V1ZEOS1HVmNqNXRFaXdwUjR2OTJnUHN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy9iN2U0YWMtODUwOC00ZDZiLWEyYmMtMjc0Y2Q2Y2FhM2Yz LzEvY011V1ZEOS1HVmNqNXRFaXdwUjR2OTJnUHN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF+cmJVzj OL0nguIWyWbVlHCDC8L/apNM5RrX6Nt4FBm7f6CjwC/J6c2UxQAx5ZtUh5LL+5Zq ads7yh3a5G7OhQgxOHln56DSsMt7QaUcdS1DndUu7nOjVhIZkHRNKEqKe+75dxDU d1o2NialTSXDPtVbOyMeWnp27ljgAdnfVynj5mSeOTHQ7rfEEDmjMdCKdkkmAwJm SKlkxhJrT5VsCxIK9ccLFv/L3Fg4BFKxc9Y7KH8kb6YohoUtib6txqf4NEgnzrEj jwzOg96TPdgBKafjLWbiAnqX3ypkZO0OdjFrAJKtgKda6OWU9IEJa3aet/WFVxI7 leoY7boi7EmGAQ== -----END CERTIFICATE-----Generated at Fri Dec 19 10:01:26 2025 by rpki-client